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A DATA CONTROL SYSTEM AND A METHOD OP CONTROLLING 
PERFORMANCE OP OPERATIONS ON DATA 


Field of the Invention 

This invention relates to a data control system using an electronic 
watermarking technique (data-hiding). More particularly, this invention 
relates to a technique of allowing data to be handled by a desired data 
control (a copying control, play-back control and receiving control, for 
example) using a mechanism for actuating the data control and information 
of a manner of controlling the data. 

Background 

As a multimedia environment is typically widely spread out, the 
protection of copyrighted material is a problem. Although devices such as 
a digital video disk (DVD) , a set top box (STB) , a cable television 
system and a network distribution, etc., have sufficient hardware 
resources for distribution of movies and other multimedia presentations, 
no specification for content protection has been provided which 
sufficiently satisfies multimedia content suppliers and, in particular, 
satisfactorily addresses the problem of illegal reproduction (copying) . 
No effective specification has been provided to prevent this problem 
despite the fact that it is very easy to copy and modify data contents of 
digital data. One aspect of the present invention is to provide a 
mechanism for safely distributing multimedia contents with a method for 
embedding a control mechanism in the content itself so as to allow the 
content to be distributed with a condition to permit copying only once 
(one time copy) - 

Some methods of data control have so far existed to protect 
contents and prohibit the contents from being copied and played back. 
PUPA 6-4026, for example, discloses a technique of generating a code 2 
which is converted frOTi a suitably generated code 1 by a one-way 
conversion f as a code indicating permission information of each category 
and the code 1 and the code 2 are both described when a permission is 
indicated while only the code 2 is described when prohibition is 
indicated to make generation of permission state difficult. However, this 
method allows multiple copying by saving the code 1 and thereafter 
describing it together with the code 2. 
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c ^nq^-^g discloses a method of permitting one 
Por example, ^"-.^^^^^^JJ^;,^^ ,,,, ,.,,cating that a data file 
Ume only copying in whxch. us.ng a flag ^^^^^^^ ^^^^^^^^ 

- not .een copie. an enc^ - ^^^^ ^^^^ 

data file if the -- ^^ ^^^,,3, flag file is a file 

..e data file .s --^/^ "J^^^^ ^^.^ is easily done simply .y 

separate from the data fxle. mult p addition. 

,„U>or .an, in .he ca.e,orv of prohibition. 

.io. a» .e.oa, .si«n. use ' - ^ ^ ^^^^^^^ 

— --.'-rineaTnt: :e::::r.nip.«ion . s... =oae o. 

coae or 3, „,,,oas have a we.K point „ainat a wUful 

£la, is possible so that ^^^^ ^„ ,„„„oi „i>ich .s 

attack by a third party. A tecnniau ^^^^^^ u desired to obtain 

tree Erom such disadvantages .s ' ^„^;^„aent o£ conventional 

. novel data control .ethod ^^Jl^^JSZ^,,,,. „ithout 
re::::^:::":^^^ -eo distribution syste^s or the 
mechanism of devices. 

..ectronic water.ar.in, techniques e»ist .or the ^J'^^^ 

— oe a -rj:::: rsMrcaued data hidm, 

^atentarxin, ^TroUective na.e .or techniques .or 

,TM,. Sinvply f ,„ „edia (still in.,., voice and 

e^eddin, ^ ^ ,„e,ratin, the information in a »ediu„ 

nation picture, etc.) and a 

i„ Which the in.ormation iS "^^'J ^^^^^ , 1, employed 

l„.or^tion as used - encryp^o^ xn her ^^^^^^ ^^^^ ^ 

.or e^eddin, i"^"-"-;^^ .eans, in i»a,e data 

„eai». by \L th ntlal data is carried by 

tor example, m.ormation otne incidentally, the term 

mcdifyin, a pixel value such as ^•>' ,„,„^„,„„ ,3 hidden 
■ embed- as used In this invention means that extr 
l„ .he .orm o£ modification o. the data itself. 

• characteristics o. electronic watermarking is that 

U is an invisible or i-"^ ^^^^ ^ „a,a 

information In media ' detectable by human eyesight, 

modi.ication) that the modi.ication 
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rather than appending data bits. The total data size is not increased by 
embedding the additional information. For example, embedding data in an 
image consisting of 640 x 480 pixels does not increase the number of 
pixels. Also, by embedding text information or voice information in an 
image, it is enough for the storage side to handle a single kind of 
medium, one of the most useful characteristics of watermarking is the 
inseparability of embedded information. Because the electronic 
watermarking embeds the appended information directly in the data 
structure of the medium rather than a header or a file, the embedded 
information can subsequently be detected even if the platform or the data 
format changes so long as the quality of the original data is preserved. 

An example of a possible data control method using electronic 
watermarking techniques is given below. Operations such as recording, 
copying and play-back of data contents by apparatus to which the data has 
been delivered, and also operations such as broadcasting of data by a 
radio wave, whether to permit receiving of data or not (receiving 
control), can be controlled in a similar manner. The method includes: 

^ °^ embedding a control flag (CF) indicating a protection 

level of the contents in video data using a electronic watermarking 
technique. 
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25 


(2) a step of detecting the CF embedded in said contents to determine 
whether or not recording or play-back of the video is permitted for 
suitably controlling recording or play-back (video recording is stopped 
when a CF indicating prohibition of recording is detected during 
recording and play-back is stopped when a medium played back is for 
recording and a CF indicating prohibition of recording is detected during 
30 play-back.), and 

(3) a step of permitting recording and leaving a record indicating that 
the video has been recorded when a CF indicating permission of one time 
only recording is detected, and prohibiting another recording by the CF 
and the recorded mark when the recorded contents are played back and 
another recording is attempted. 

The steps (1) and (2) can be implemented by embedding a CF in the 
contents in advance by the electronic watermarking technique in preparing 
the contents. The step (3) can be also implemented to prohibit another 
recording using the electronic watermarking in the manner similar to the 
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v-i^m exists in this case, video 
st.ps <1. and (2> . However. . ^ to be 

„.ae compactly aad at a low pr.ce ^ i,ai=ating the 

electronic en^edain, o£ watermarXs fo P ^^^^ „ 

Tp^aratus nas a U^itea processin, cap,..x.ty. 

.aaitionallv. w.en tne s^^^ect^^eo^a^a .^^^^a. data^^i^^^s^ 

MPEG compressed, for example, it . been performed by 

^ich has embedded therein a mart ^^^^ 3^.picture. 

.e.composin, it with ^^^ ^^ ^^^^^ detectin, the CP. ^e 
etc.) in addition to separation of 

of buffers and circuits "-^^ ^/J^^ ,,,, ^^s not ,ive a 

.„.ce as lar,e as the « aetect on ^^^^^^^^ 

,„ctical solution. Further, because ^ ,,,,avanta,e exists in 

en^eddin, of information consists o ^^^^^ „ 
which the embedded information does 
„hen the data is decompressed. 

■ there is provided a system and a method 

according to the invention, electronic watermarlcin, 
secure control of data operations usin, 
technique, as set out in the claims. 

• , „f the invention according to this aspect 
, first e.a=oaiment "'J^^^ ^^^^^^^ pxayba* and 

provides a system tor -""^^JJ^ „,„rmar.in, techniaue. Use of 
receiving of data using an e^ 'J-'^ „,,3tive to an attac. by a 

■ invisible- electronic watermark ng ^^^ely on 

.iltul third party than alternative "arn^^^^^ ^ 3,3,em of 

edditional -""''"^f^^fi^U.on can also be less expensive than 
aata control according to h i „,,ermarUng for data control. 

irstrit rar :Teast e,uai -rrroit"^^^^^ 

existing with existing methods. 

of the invention, a data control system 
::::: rr rrll of cUg. Playbac and receiving, 
(having the capability 


IS built which implements the method steps of: embedding a control flag 
for control of data, using an electronic watermarking technique; 
preparing a token having information as to how to control the data 
(number of copies and play-backs, designation of reproducing equipment 
and user, etc., for example) by using the content of said data,- 
distributing said token appended to said data; detecting said control 
flag from the distributed data; reading said token appended to said data 
when said control flag is detected; and controlling said data according 
to a predefined control rule (a rule deciding the type of control by a 
combination including the token, flags and type of media) of said token 
or said control flag. 

in a preferred embodiment of the invention, a subsequent data 
processing operation can be suppressed by modifying the token (deletion 
of the token, change of the number of the tokens, modification of token 
preparing image part) which is used in controlling the data. 

Brief Descriptin n of the. Drawings 

An embodiment of the present invention will now be described in 
more detail, by way of example, with reference to the accompanying 
drawings in which: 

Fig.l shows an embodiment of a hardware configuration of a data 
control system. 

Fig. 2 is a schematic diagram of a data control system which uses an 
externally attached DVD drive. 

Fig. 3 is a schematic diagram of a data control system which has a 
DVD drive installed internally. 

Fig. 4 is a block diagram of a DVD-R data control system. 

Fig. 5 shows a copying control system in digital image distribution 
which utilizes a one-way hash function. 

Fig. 6 shows a copying control system in digital image distribution 
which utilizes an asymmetrical key. 
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>, no the flow of a token generating process. 
Fig. 7 is a diagram showing the flow 

. .hP flow of a data control process. 
Fig. 8 is a diagram showing the flow 
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A preferred embodiment of this invent 
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control according to "''-^ "^^^..^/^t of the control is typically 
recording/reproducing media, ^ ^^le. Methods of 

decided by a co^lnation of ^['J^ they are Xnown. 

such combination are not to a more detailed 

.hose sxiued in the ^ ^^^rcontLls. xf necessary, the toXen is 

form so as to implement a variety 


manipulated in the step 840 to modify the subsequent data control. 
Manipulation of the token means a change of the number of the tokens to 
limit the number of copyings, and deletion, disabling and modification of 
the token, in addition, the portion of the data from which the token is 
to be prepared may be manipulated. The token may be manipulated before 
the data control is done by the token for the purpose of security. 

The roles of the control flag and the token are same except that a 
predetermined data control is done only when the control flag exists. 
Information to control the data (the number of permitted copies, etc.) 
may be included in either the control flag or the token, or in both. 

Fig.l shows an embodiment of a hardware configuration of a data 
control system used in this invention, including for controlling copying, 
play-back and receiving, and preparation of a token. The system 100 
comprises a central processing unit (CPU) 1 and a memory 4. The CPU 1 
and the memory 4 are connected to a hard disk device 13 (or a recording 
medium drive device such as an MO, a CD-ROM 23 and a DVD 32) as an 
auxiliary storage via an IDE controller 25. Similarly, the CPU 1 and the 
memory 4 are connected to a hard disk device 30 (or a recording medium 
drive device such as an MO 28, a CD-ROM 23 and a DVD 31) as an auxiliary 
storage via an SCSI controller 25. A floppy disk device 20 is connected 
to the bus 2 through a floppy disk controller 19. 

A floppy disk is inserted to the floppy disk device 2a. A COTiputer 
program code which gives instructions to the CPU and the like in 
cooperation with an operating system to practice this invention is 
recorded in the floppy disk, the hard disk device 13 (or a recording 
medium such as an MO, a CD-ROM and a dvd) , 30 and a ROM 14 and executed 
by being loaded in the memory 4. The computer program code may be 
compressed or divided into pieces for recording in a plurality of media. 

Further, the 100 may be provided with a user interface hardware 
including a pointing device 7 (a mouse and a joystick, etc.) for 
inputting, a keyboard 6 and a display 12 for presenting visual data to 
the user. Further, a printer may be connected via a parallel port 16 and 
a modem may be connected via a serial port 15. The system 100 can be 
connected to a network via the serial port and the modem or a 
communication adapter 18 (Ethernet an token ring cards) for communication 
with other computers and the like. In this invention, the distributed 
data can be sent and received by the serial port 16 and the modem or the 


• .danter 18 in addition to distribution by a medium such as 
tier a Lote transmitter/receiver .av be connected to 
ar:ort Ts .e parane. port U .or trans.ittin./rece.v.n. b. 
nieans of infrared or radio wave radiation. 

v.r 23 receives an audio signal from an audio controller 21 
A speaker 23 receives controller 21 A/D 

.ia an amplifier 22 for output as a voice ^ ^ ^^^^^^^^^^ 

Unalo./di.ital) converts voice - ^ ; ,,,,,,,, ..e 

to allow voice information external to the system 


system. 


. ■„ reaaily understood that the data control system 
„ such, .t ^ „nventional personal computer 

o£ this invention may be practiced y .-omputer, 

a worxstation, a --^^^^^ /^.t ^^sH and a facsimile 
home electric appliances su^ as a t ^^^^^^^ ^^^^^^ 

eauipment implementing a computer. telephone set, a 

a game machine having a co^unicat.on function, a t P 

^ ^ T^rvri-able telephone, a P"S, an ex«v,u 

Ta^:-::-:^^^^^^^^^^^^ ^^^^ raid—rr^at a. 
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of these components are tne 

. e^diment o. ^^'^^ C^^rsrasfr rfthe ovp 31 
controlling data is now ^^<="^^- ^ ,„„,cted while shows 
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• case Where they are ir^rnaUy Z^t^^ - are connected 

pvo-R drive 40 and an „,„,,ce, interface .they 
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^ ^r.^r.^ :>14 which is connected to 
„ n,.4. a dis. 210 is driven by a ^ „ „p,. 

, arive Circuit 212 and data f ^ fj/:;! .^^and from a 

electrical head 216. The drive circuit 216 is 

w, 1, oiB The signal read by the opt eiecti^ 
PTO control block 218. amplified, converted if 

inputted to the PVO control "-^J" "^; ^i„cX 220 

necessary, and sent to a decoder bloc. ^.^al. 
Adulates and demodulates the signal »^ ; ^^,,,,,„, a 

»e PVP control blocx 21, -;--^;: '' er a recorded in the dis. 
control signal from the decoder blocX or serv 


to control the drive circuit 212. The DVD control block 218 also 
includes a signal reading circuit 218A. 

The data received in the decoder block 220 is error corrected by a 
buffer 220A, an MPU 220B and a decoder 220C in the decoder block which 
are connected by a common bus, decoded in real time and sent to a data 
control block 230. In the data control block 230, generation of a token, 
appending the token to the object data, detection of CF information, data 
control by the token and manipulation of the token are done using an 
electronic watermarking technique, image data is sent to the system 100 
via an ATAPI interface 222 while voice data is sent to the system 100 via 
a DAC (digital to analog converter) 224. 

In recording, the data flows conversely to reading from the ATAPI 
interface 222 through the data control block 230, and the decoder block 
220 to the DVD control block. The opt-electrical head 216 operates as a 
recording head at this time, while the above DVD-R data control system 
cooperates with the data processing system 100, a stand alone dvd play- 
back machine or a stand alone DVD-r recording machine can also work 
without departing from the substance of this invention. 

Fig. 5 shows an embodiment of a copy control system in digital image 
distribution using a one-way hash function. In summary, this is a system 
which prohibits a further copying or recording by appending a token to a 
broadcasted digital data for controlling copying or recording using an 
electronic watermarking technique and disabling the token once the data 
is copied or recorded, while the token may include information as to the 
manner of controlling data (the number of permitted copies, the nximber of 
permitted play-backs, designation of reproducing equipment and 
designation of a user, etc.) as the CF (control flag) does, it is assumed 
in Fig. 5 and Fig. 6 that whether data may be copied or not is determined 
depending on the presence or absence of a token for simplifying the 
description. Further, the number of tokens may be changed to a desired 
number depending on the environment of implementation (the number of the 
tokens may be defined as the limit of the number of copies or play-backs 
for example) . 

In the embodiment of Fig. 5, a CF indicating to allow copying up to 
one time is embedded in the content by an electronic watermarking 
technique. The recording machine is allowed to copy only one time only 
when this CF is detected. The result of arithmetic operation of a digital 
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content is appended to the digital content, such as a digital mage a 
: : a vide^ and a digital audio .including a cc«.essed strea. su=n 
^pL The result of the arit>»etic operation is called a -token- It .s 
MPEG) . Tne re oemitted or not depending on 

determined whether copying or playback is permute 

the presence or absence o£ the "token". 

«,e copying control system is no. described in more detail In 
rig 5. the token is a bit string which is calculated £rom a part (or all) 

rige data using a one-ay hash function, etc.. and is recor ed or 
held in a predetermined place as a comment field or user "ata and 
distributed along with the image data. The one-way hash function or 
! lating a token is publicly known and includes MPS or CBC .Cyclic 
rerdanc^ Check, . The function to generate a token or the portion of the 
ILge to which arithmetic operation is applied is held in secret to 

prevent the token from being generated in the user side. 

The image data to which a one-way hash function is applied is 
.electrd by 1 e.*edded key. The portion of the image data to be used and 
th "tial value of the hash arithmetic operation are kept in secret 
^htle the hash function itself to be used is open to public. The 
related token is appended by r^ording it 

r/r.Tt:: ':^Z:Zi:: ba. function is general. 

expressed by; 

h = H(M) 

Where M is a message (numerical value) of an arbitrary length, h is a 
Telical value of a fixed length and H is a defined hash functxon. The 
numerical value of satisfying the following conditions 

one-way hash function is defined as satistying 

in addition to the above condition. 

. it is easy to calculate h when M is given. 

. t is difficult to calculate M (reverse conversion) when h is gxven. 
- it is difficult to find M. which satisfies H(M) = H(M') when M is 

given. 

This Characteristic is utilized to electronically sign the data, 
authenticate or detect whether or not modification is ^ 

a Dlurality of elements. An example of generating a hash 
message M may be a plurality ui. 

by the following method is given here. 


Hi = H(li,Hil) 


(1° = k) 


Namely, is a combination of l^, and the first to the i-th 

hash values. is an image data block and n blocks to i" are selected 
by an embedded key. is the hash value of the i-th image data block 
and a hash value is obtained by taking and up to (i-l)th hash values 
(h^-i) as an input and repeating the arithmetic operations by a number of 
times equal to the number of the image data blocks (n) which is the 
subject of the arithmetic operations. l° is represented by a constant and 
is also held in secret along with the embedded key. 

In generating a token, an effective token is appended only when a 
CF which is embedded by an electronic watermarking technique indicates 
that the content may be copied once. The token is also generated from a 
signal detected from a mark embedded by an electronic watermarking 
technique. In this case, a token or an abstract is generated using a 
signal from an electronic watermarking detector in authenticating the 
token in the user side. 

The generated token is written in the user data (UD) area of 
extended data which exists in a sequence header of the MPEG format, for 
example. The generated token may be recorded by scrambling it with an 
asymmetrical key. in this case, the token can not be generated even if a 
clacker can know the portion of image information which is used for 
generating the token. 

In the user side, the token is authenticated as being valid only 
when the CF embedded by an electronic watermarking indicates that the 
content may be copied once. A token is generated in a similar manner in a 
recording machine, etc., from a distributed image and is verified to see 
whether or not it matches the token which is distributed along with the 
image. If it can not be authenticated, recording is inhibited. Also, 
copying to analog form is prevented by appending an analog protection 
signal or CGMS-A data to the analog output of a DVD reproducing machine. 
If it is authenticated, a stream in which the token is deleted or 
disabled is recorded. Disabling (which is enough to create a mismatch 
with the result of arithmetic operation) is done for the token. Or, it is 
done by modifying the portion which is used for generating the token (if 
the token is generated from a modified image, it does not pass the 
verification because it is not a true token) . when a further copying is 
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exist. 


.==nriated therewith must not be a copy. 
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abstract is kept in secret abstract is prepared from a 
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si„ila.lv -->-^/X t aua aespite »e =r aoes no. pe^i. one 
is inhibited when a toKen is 

I- - ^.>^a token is disablea. 
time copying. Further, the token 

K limited to a data control, a system permitting to 
Without being limited implemented by granting a 

e^ercise a right only once -^^J-^^J^^ - token »hen the right 
certain right by appending a toke ^ ^^^^^^ ^^^^^ ^ ,3 

::rrer::V::e:ri:'irana is aisablea .en the money is paid. 

. method Of controlling copying »itb re'tLrof 

STB is next described as an application woadcastin, and 

receiving a toll digital '^'^'^"'^^'^ ['^^ information. Macrovision 

controlling analog rmethoa of a hanay control within 

has existea. However, there has been ^^^^^^^ 

- - is° Tcl::™- - -roiung an analog 

rge" ::i:: ^crovislon is now described hereunder. 


Set TOP BOX 

(Analog video) 

Digital ^ YTR 

> MPEG decoder 

Toll information ^ 


Broadcasting 
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I Control image 

' > Recording by 

Macrovision 

sl.n. '° ' Pennission of a digital output to be 

Simply granted within an only when a subscriber pays a toll 1 • 
a ton digital broadcasting such as a satelll.. k T ' 
flag and a token are looke! at Z broadcasting, a control 

e looked at. The reason of this is as follows. 

With the control flag embedded by watermarking being Copy control 
Information (CCI) of 2 b^^c r.^^- • Control 
I ^i; ot 2 bits, permission or prohibition of image 

described hereunder. MPEG- 2 as 


Digital Recorder like a DVd-ram 


MPEG -2 ==> 

w/TOKEN 

(write) 


Watermarking 
==> chip ==> DVD -RAM ==> 
Write Disk 

Detect CCI 

TOKEN Detect/Destruct 


==> MPEG-2/Play back 
Image (read out) 


For writing 


CCl/TOKEN 


(1,1) 
(0,0) 
(1,0) 
(1,0) 
(-,-) 


TOKEN 


COPY Permission 


NO COPY 
COPY OK 

COPY OK (Destruct TOKEN in writing) 
NO COPY 
COPY OK 


reading out (from DVD -ram) 
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CCI /TOKEN 


COPY permission 


(1.1) «° ^"^^ 

(0.0) 

(1.0) + TOKEN NO PLAY 

PLAY 


(1,0) 
(-,-) 


PLAY 


„ .nx seen .r^ a^ve copvin, pe^iss.o. can .e aone 

Digital Recorder 

set TOP BOX 

(MPEG- 2) 

Digital , TOKEN --> DVD-VTR 

> Destruction control of TOKEN 
Broadcasting - > oescrui, 

A 
1 

Toll information 

. no Side send out a MPEG-2 stream with CCld.O) 
having the sending ^/^^^ receiving STB 

.„d a toxen associated to.en as it is based 

control destruction of the to.en ^ -^^^^^^ exterior, for 

on the toll information which ^ e<iuipment having a 

example, in a digital -adca-ng r .^^^^^^^ ^^^^ ^ ^^^.^ 

watermark detecting chip, such as a dig 
controlled as follows. 

> NO COPY 


(1,0) 

+ TOKEN I 
I 


> Destruct TOKEN 

> pass the TOKEN as it is (TOKEN lceep)-> COPY 

> Pass tn« ^^^g ^Qpy) 


„ ea.uon, . .e.oa ^^iz::^:^^:':^ 

hereunder , 

> pass as it is (NO TOKEN) -> NO COPY 


(1.0) 


+ DUMMY I (no more copy) 

« > Add tolcen > 

TOKEN 
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A method of destructing a TOKEN and a method of adding a TOKEN are 
now specifically described hereunder. 

In the method of destructing a TOKEN, the stream of MPEG is 
monitored to find a TOKEN Header as shown below, if the TOKEN Header is 
found, a control is effected as to whether to destruct the TOKEN 
following the TOKEN Header or not by taking the toll information into 
consideration. A TOKEN Header detecting circuit as well as an AND circuit 
for destructing a TOKEN can be easily implemented. 


MPEG-stream =====♦♦========«===; 


I 


I 


Toll >| TOKEN Header 

Information | Detecting 
I Circuit 


- - > 



==> MPEG- stream 
Output 


Destruct TOKEN control signal 

1: pass 

0: destruct 

in the method of adding a TOKEN, the stream of MPEG is monitored 
and the TOKEN is calculated from the stream to find the TOKEN Header, if 
the TOKEN Header is found, the TOKEN is overwritten in the TOKEN area 
(containing dummy data) following the TOKEN Header by taking the toll 
information into consideration. A TOKEN Header detecting circuit, a TOKEN 
calculating circuit and a SELector circuit for adding a TOKEN can be 
easily implemented. 


MPEG-stream ======*♦============; 



==> MPEG -stream 
Output 
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I I 


Toll >l TOKEN Header | I 

information | Detecting |-->l 

I circuit I 

I TOKEN I 

I calculating 1 

I Circuit I 

1 1 

Add TOKEN control 
1: pass 

0: addr output TOKEN to the 
stream when 0. 


« shc»n in the above e.^oai»ents, adaea intcr^ation .TOKE» for 
controllin, copyin, (=o» Permitted or not, of a digital i«a,e output 
n t^a er^^r^in, can be easily modified within the STB based on a 

card in a consumer box of an STB, etc.. of a di,ital broadcast.n,. 
Ter ton information and user input infor^tion. It is i:.portant here 
trt tie is no need to obtain Copy Octroi Information ,ccx, w.th.n the 


STB, 


By usin, the method of this invention, an effect which is as good 

- or better ^ 
rr ^"i: ^-cn is ..o of the ccnven^---- 

Tan application of permittin, one time copy of a distributed content 
becl^se^nly a function for disabling a token is required bes.de 
ere::r:n:: watermarking chips which are inherently retired for detecting 


the CF. 


x„ addition. When a token is «.^edded using only the electronic 
watermarking techni.e. it ^ ZL^Z^VX^ 

Tor r Lnirhrl:: :re"t::: Lmilany becomes ineffective 
:r:; departs from the format, the effect -h-itin, co^^-ng 

— any change - -a fo.^^ — rrrec":: rat!" 
the token becomes ineffective, tnereoy p 

control . 
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Further, added information (TOKEN) for controlling copying of a 
digital image output using a watermarking can be easily modified within 
the STB based on a smart card in a consumer box of an STB, etc., of a 
digital broadcasting, user toll information and user input information 
without the need to obtain copy Control Information (CCD within the STB. 
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CLAIMS 


1. A data control system comprising: 

. X.- to be distributed, using an 

electronic watennarkin, techni<^e. a control Cla, 
processing operation control! 

information as to how to control the data, 

„eans for appenain, saia token to saia aata; 

.eans for aistrih.tin, saia aata to which saia token is appenaea, 
„ea„s for aetectin, saia control fla, within the aistrihutea aata, 

^^Ai^A ^n said data when said 
.eans for reading said toKen appended to 

control flag is detected; and 

.-.ina said data processing operation according to 
inToratroI ana . .eaef inea control r.e of saia token 

or said control flag. 

. « of claim 1 in which said means for 

— r crrir:! — — - ---- 

said token. 

3 . aata control s.ste« of clai. . in which saia aata processing 
operatto! is a copvin,, PUvhacX or receiving operation. 

■ annaratns for controlling the copying of aata which 
, . . aata copying '^^'^ „ ,,ectronlc watermarking 

has a control flag, enJ^eaaea ^ „a which aata 

.tfecting control of copying oi 
technxoue. for -"-^^J ,,,,, ^.^luding copying control 

,as a tolcen ^P^^^^^^™ ^^^,,,,,3 comprising: 
information for the data, the app 

ied the embedded control 


means for detecting 

flag; 


within data to be cop: 


means, responsive to detection of said control flag, for retriev 
from said appended token the copying control information for the data; 
and 


means for effecting copying control of said data according to a 
predefined control rule corresponding to said copying control 
information. 

5. A data play-back apparatus for controlling the play-back of data 
which has a control flag, embedded therein by an electronic watermarking 
technique, for effecting control of play-back of the data and which data 
has a token appended thereto, the token including play-back control 
information for the data, the apparatus comprising: 

means for detecting within data to be played back the embedded 
control flag; 

means, responsive to detection of said control flag, for retrieving 
from said appended token the play-back control information for the data; 
and 

means for effecting play-back control of said data according to a 
predefined control rule corresponding to said play-back control 
information. 

6. A data receiving apparatus for controlling receiving of data which 
has a control flag embedded therein by an electronic watermarking 
technique for effecting control of receiving of the data and which data 
has a token appended thereto, the token including control information for 
the data, the apparatus comprising: 

means for detecting within received data the embedded control flag; 

means, responsive to detection of said control flag, for retrieving 
from said appended token the control information for the data; and 

means for effecting control of receiving of said data according to 
a predefined control rule corresponding to said control information. 


A data control apparatus comprising; 
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fiaa is einbedded in the data using 
of the data, which control flag is eino 

electronic watermarking technique; 

„e», .o. .e,a.. a «... »Mc. U ^.P-e- - ~ 

-. ..>^=. ,^a^a when said control tiag is> 
indicating how to control the data when 

and 

^roi Of said data according to a predefined 
means for effecting control of saia aa 
control rule of said token or' said control flag. 

token for effecting data 
A token preparation apparatus preparing a tolcen 

control comprising; 

=.T, oipctronic watermarking 
„eans for embedding in the data, using an electron 
„c.ni:ra control nag to e„ect control o. the data, 

_s .or preparing, using the content o. said data, a token .a.ing 

. to now to control the data, and 

information as to now w v. 


means for 


appending said token to said data. 


A data c 


ontrol system comprising; 


,or e^edding in data to .e t ^ r tl^:. 

Of said data, a first token 


:neans for emoeuu... - electronic watermarking technique, 

effect control of the data, using an electro 


nveans for preparing, using the content 

= = ^^. how to control the data, 
having information as to how to c 

Ainn qaid first token to said data, 
means for appending said tirs 

„eans for distributing said data to »bicn said first toXen is 

appended* 


means 


means 


,„r detecting said control nag fro. tne distributed data, 
for reading out said first token appended to said data. 


means for preparing 


a second token from said data. 


means for comparing the first token with the second token, and 


means for effecting control of said data according to a predefined 
control rule of said first token or said control flag using the result of 
said comparison. 

10- A data control system according to claim 9 in which said means for 
effecting control of data further comprises means for deleting or 
disabling said appended token. 

11. A data control system according to claim 10 in which said means for 
preparing a first token and said means for preparing a second token 
include means for preparing a token from the data using a one-way 
function. 

12. A data control system according to claim 11 in which said control 
is a control of a copying, play-back or receiving operation. 

13. A data copying apparatus according to claim 4, including: 
means for preparing a second token from said data, 

means for comparing the appended token with the prepared token, and 

means for effecting control of said data relating to copying 
according to a predefined control rule of said appended token or said 
control flag when said comparison matches. 

14. A data play-back apparatus according to claim 5, including: 
means for preparing a second token from said data, 

means for comparing the appended token with the token prepared, and 

means for effecting control of said data relating to play-back 
according to a predefined control rule of said appended token or said 
control flag using the result of said comparison. 

15. A data receiving apparatus according to claim 6, including: 
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means for preparing a second token from said data. 

means for comparing the appended token with the token prepared, and 

means for effecting control of said data relating to receiving 
according to a predefined control rule of said appended token or sa.d 
control flag when said comparison matches. 

16. A data control apparatus according to claim 7. including: 
means for preparing a second token from said data. 


means for comparing 


the appended token with the token prepared, and 


means for effecting control of said data according to a predefined 
control rule of said appended token or said control flag when said 

comparison matches. 

17 A data control system according to any one of claims 13 to 16 in 
Which said means for effecting control of data further comprises means 
for deleting or disabling said appended token. 

18. A token preparation apparatus for preparing a token for effecting 

data contral comprising: 

means for embedding in the data, using an electronic watermarking 
technique, a control flag to effect control of the data; 

means for preparing, using the content of said data, a token having 
information as to how to control the data; and 

means for appending said token to said data. 

19 A data control system according to any one of claims 13 to 18 in 
which said means for preparing a token further comprises means for 
preparing a token from the data using a one-way function. 


A data control method comprising: 


a step of embedding within data to be distributed a control flag 
for effecting data control, the embedding using an electronic 
watermarking technique; 

a step of preparing, using the content of said data, a token having 
information as to how to control the data; 

a step of appending said token to said data; 

a step of distributing said data to which said token is appended; 

a step of detecting said control flag from the distributed data; 

a step of reading out said token appended to said data when said 
control flag is detected; and 

a step of controlling said data according to a predefined control 
rule of said token or said control flag. 

21. A data control method of claim 20 in which said step of controlling 
said data further comprises a step of modifying, disabling or deleting 
said token. 

22. A data control method of claim 21 in which said control is a 
control of copying, play-back or receiving. 

23. A computer program product comprising computer program code 
recorded on a computer -readable recording medium, said program code being 
for controlling the performance of data processing operations on data 
having a control flag embedded therein using an electronic watermarking 
technique and having a token appended thereto, said token indicating how 
to effect control of the data when said control flag is detected, said 
program code comprising: 

logic for detecting from data the control flag for effecting 
control of the data; 

logic for reading out said token appended to said data; and 

logic for effecting control of said data according to a predefined 
control rule of said token or said control flag. 
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